What is the difference between Filescan.io and MetaDefender Sandbox commercial offerings?
Feature / Product | Filescan.IO (Community) | *MetaDefender Sandbox * (Standalone) | Adaptive Sandbox (Embedded MetaDefender Core Module) | MetaDefender Sandbox (Cloud, MDaaS) |
---|---|---|---|---|
Use Case | Free Triage with public reports, limited configurability | Full Malware Analysis, Alerts, Threat Hunting | Detection, Triage Alerts | Detection, Triage Alerts |
Private Reports | No | Yes | Yes | Yes |
Full Report | No | Yes | No | No |
Access all uploaded samples | No | Yes | No | No |
File size limit | 100 MB | 2000 MB | 2000 MB | 140 MB - 1 GB |
API Limits | Yes | No (FileScan.IO API) | No (MD Core API) | Yes |
Priority Processing | No | Yes | No | Yes |
User Management | No | Yes | Within MD Core | Within MD Cloud |
ACL / Backend Access | No | Yes | No | No |
Configurable Engine | No | Fully | Partially | No |
Configurable YARA rules | No | Yes | No | No |
Advanced Search / Threat Hunting Capability | No | Yes | No | No |
Integration with SOAR | No | Yes | No | No |
Integration with SIEM | No | Yes, via CEF syslog | Yes, via CEF syslog | No |
Second-stage file downloads | Yes | Yes | No | No |
Image text analysis (OCR) | Yes | Yes | No | No |
VBA emulation | Yes | Yes | Yes | Yes |
Powershell script emulation | Yes | Yes | No | No |
URL emulation and phishing detection | Yes | Yes | No | No |
3rd party OSINT sources | No | Yes | No | No |
Embedded file processing | Yes | Yes | Yes | No |
File visualization | Yes | Yes | No | No |
QR code processing | Yes | Yes | Yes | Partial |
OPSWAT Geolocation | Yes | Yes | Yes | No |
String processing | Yes | Yes | Yes | Partial |
Was this page helpful?